|
EBIOS and the Common Criteria (4 days)
This course is designed for anyone wishing to have a better understanding of the ISO 15408 standard, better known as the Common Criteria. The Common Criteria offer a structured approach to examining the way in which security is taken into account in the design, development, installation and exploitation of an information product or system. The EBIOS method of risk analysis and treatment incorporates the general model of the Common Criteria. By the end of the course, participants will be able to analyze information projects that require a security assessment using the Common Criteria and EBIOS.
- History and introduction to the standard and its structure (15408-1, 15408-2, 15408-3)
- Presentation of the certification process
- Official sources of accreditation certificates
- Reuse of previously certified products and interpretation of an accreditation certificate
- Target of Evaluation (TOE) sources and interpretation of TOE Protection Profiles (PP) defined around the world
- Detailed review of the general model (15408-1)
- Detailed review of the 15408-2 standard
- Presentation of Security Functional Requirements
- Demonstration of the definition of functional requirement in EBIOS
- Detailed review of the 15408-3 standard
- Presentation of Security Assurance Requirements
- Demonstration of an “assurability” audit using EBIOS
- Using EBIOS to conduct an analysis or evaluation of the security of a product
- Using EBIOS to establish a Protection Profile for a typical software application
- Using EBIOS to establish a Protection Profile for an information system
- For using EBIOS, at least one workstation for every 2 students, ideally one workstation per student
- Windows XP and the most recent release of Sun’s JVM must be already installed by the client on each workstation.
- Maximum number of students: 12.
- A certificate of attendance will be given to participants.
- Please note that this course is only offered in French.
|
